Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and earlier, which originates from an unauthenticated attacker who can delete the rooms of any user by knowing the user and room ID...

PT-2025-16480 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk applications affected versions not specified Description: A maliciously crafted PDF file can cause a Memory Corruption issue when parsed through Autodesk applications, allowing a malicious actor to execute arbitrary code in the conte...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from China-based Growatt. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to obtain a complete list of users associated with an arbitrary accou...

Oracle Communications Applications 安全漏洞

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation USA. A security vulnerability exists in Oracle Communications Order and Service Management versions 7.4.0, 7.4.1, and 7.5.0 of Oracle Communications Applications, which...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and earlier, which stems from an attacker's ability to gain access to any user's smart home device group information...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Applications Framework versions...

PT-2025-16445

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks require human interaction from a person...

CVE-2025-30718: Undefined Security Weakness

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments, File Upload. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Citrix Virtual Apps and Desktops - Unable to EDIT Published DualAdmin APP-V application in WebStudio

Admin cannot edit some of the published applications. Affected applications: Dual Admin APP-V Applications Error displayed: More details: Action Name: APPApplicationPropertiesException: StudioErrorId : UnknownError Error Source : CitrixAppVService Sdk Error Message : Cannot process command becaus...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which originates from an unauthenticated attacker being able to rename any user's device...

CVE-2025-24358: Cross-Site Request Forgery (CSRF)

gorilla/csrf provides Cross Site Request Forgery CSRF prevention middleware for Go web applications & services. Prior to 1.7.2, gorilla/csrf does not validate the Origin header against an allowlist. Its executes its validation of the Referer header for cross-origin requests only when it believes...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to query the total energy consumption information of any...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt in China. An information disclosure vulnerability exists in Growatt Cloud Applications version 3.6.0 and prior versions, which can be exploited by an unauthenticated attacker to query API endpoints and obtain device details...

PT-2025-16478 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk applications affected versions not specified Description: A maliciously crafted JPG file can cause a Heap-Based Overflow when linked or imported into certain applications, potentially allowing a malicious actor to crash the...

Growatt Cloud Applications 安全漏洞

Growatt Cloud Applications is a monitoring platform from Growatt, a Chinese company. A security vulnerability exists in Growatt Cloud Applications version 3.6.0 and earlier, which originates from an unauthenticated attacker being able to obtain a list of smart devices via an unprotected API...

OpenCMS 17.0 - Stored Cross Site Scripting (XSS)

Exploit Title: OpenCMS 17.0 - Stored Cross Site Scripting XSS Date: 24-11-2024 Exploit Author: Siddhartha Naik Vendor Homepage: http://www.opencms.org/en/ Software Link: http://www.opencms.org/en/modules/downloads/begindownload.html?id=dade528f-ec17-11ee-ab97-7fde8b0295e1 Affected Version: 17.0...

PT-2025-16476

Name of the Vulnerable Software and Affected Versions Autodesk applications affected versions not specified Description A specially crafted PDF file, when linked or imported into Autodesk applications, can lead to a Heap-Based Overflow. An attacker can exploit this to cause a crash, potentially...

CVE-2025-1276: Out-of-bounds Write

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

Pre-Installed Malware on Cheap Android Phones Steals Crypto via Fake WhatsApp

Cheap Android phones with preinstalled malware use fake apps like WhatsApp to hijack crypto transactions and steal wallet recovery phrases...

Wallarm Research Releases Nuclei Template to Counter Threats Targeting LLM Apps

Wallarm Research has just released a powerful new Nuclei template targeting a new kind of exposure: the Model Context Protocol MCP. This isn’t about legacy devtools or generic JSON-RPC pinging. It’s about the protocol fueling next-gen LLM applications — and it’s already showing up exposed in the...